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Abstract 

Determining the causes of instability and contagion in financial networks is necessary to 
inform policy and avoid future financial collapse. 

In the American Economic Review, Elliott, Golub and Jackson proposed a simple model for 
capturing the dynamics of complex financial networks. In Elliott, Golub and Jackson’s model, 
the institutions in the network are connected by linear dependencies (cross-holdings) and if any 
institution’s value drops below a critical threshold, its value suffers an additional failure cost. 

This work shows that even in this simple model there are fundamental barriers to understanding 
the risks that are inherent in a network. 

First, if institutions are not required to maintain a minimum amount of self-holdings, any 
change in investments by a single institution can have an arbitrarily magnified influence on the 
net worth of the institutions in the system. This implies that if institutions have small self¬ 
holdings, then estimating the market value of an institution requires almost perfect information 
about every cross-holding in the system. 

Second, Even if a regulator has complete information about all cross-holdings in the system, 

it may be computationally intractable to estimate the number of failures that could be caused 

by a small shock to the system. 
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1 Introduction 


The recent financial crisis and subsequent bailout have highlighted the need for a better understand¬ 
ing of the dynamics of financial networks. Indeed, the complexity of modern financial networks has 
been blamed for our collective failure to recognize the presence of serious risks in these systems. 
In this work, we show that even in extremely simple financial networks understanding the risk 
present in the system is computationally intractable in general - even in the presence of perfect 
information about all participants in the system. We hope that these insights will help regulators 
and policymakers to better understand the dynamics of financial networks. 

Understanding an individual’s risk in a financial network is a difficult task, because an insti¬ 
tution’s ability to fulfill its outgoing financial obligations is not a local property, i.e., it cannot 
be understood by examining a single individual in isolation. An institution’s ability to make its 
outgoing payments may depend on whether its incoming payments are made by its debtors, which 
in turn may depend on whether the incoming obligations are made to those institutions, etc. Thus 
each institution, acting without a global view of the network, cannot effectively understand its 
risk. Nevertheless, one might hope that a regulator, with a global view of the network could better 
understand the opportunities and risks inherent in the system. 

Even with a global view, the situation remains relatively complex. One complicating factor is 
the existence of cycles in the financial network, for example institution A may have obligations to 
institution B which has obligations to institution C, which in turn has obligations to institution 
A. The existence of these cyclical interdependencies has been put forward as one of the primary 
sources of complexity into financial networks. In this work, we will examine network dynamics in 
both cyclic (Theorem 1) and acyclic networks (Theorem 3). 

One of the driving forces in the study of financial networks is their ability to magnify risk: if an 
institution, A, defaults on its obligations to institution B , this may cause institution B to default 
on its obligations to institution C etc. The spread of risk through a financial network is known as 
financial contagion and has been carefully modeled and studied [AGOO, EN01, GHM12, AOTS13, 
GY14, EGJ14], 

This work focuses on quantifying the ability of financial networks to amplify and conceal risk. 
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2 Our contributions 


In this work, we study two questions related to the stability of financial networks. First, we look at 
how sensitive market valuations can be to small changes in network structure. Second, we examine 
the computational complexity of determining how far a given network is from a massive failure. 
Throughout this work we use the network model put forward by [EGJ14]. In this model, financial 
institutions own shares of underlying assets, and the institutions are connected by cross-holdings, 
which are modeled as linear dependencies. If an institution’s market value drops below a certain 
critical threshold, its value suffers a further discontinuous shock, modeling the effects of a loss of 
investor confidence, or the failure to pay everyday operating costs. See [EGJ14] for an in-depth 
discussion of the interpretation and real-world validity of this model. The formal mathematical 
model is described in detail in Section 4. 

Our first result (Theorem 2), shows that financial networks can be highly sensitive to small 
changes in their link structure. Concretely, we show that if a single institution changes a single 
cross-holding by e, the market values of institutions in the system can change by as much as e/2r, 
where r < 1 is the minimum amount of self-holdings of the institutions in the network. The 
minimum self-holdings, r, is a measure of integration of the network, where r = 0 corresponds to 
a fully integrated network, and r = 1 corresponds to a network with no integration. This result 
shows that if each institution retains only, say, 5% self-ownership, a change in a single holding by e 
can result in a 20e change in an institution’s market value. This amplification is directly caused by 
cycles in the network, and in acyclic networks this type of magnification cannot occur (see Lemma 
1). Our bounds are essentially tight, and Theorems 1 and 2, show that the true sensitivity is in 
fact O (e/r). 

This sensitivity magnification has many consequences. First, it means that in order to esti¬ 
mate market values of institutions within the system, all cross-holdings need to be known to an 
extremely high degree of precision. Investors or regulators who wish to calculate market values 
can be extremely far off if even a single cross-holding in the network remains unknown to them. 
Second, because small changes in a single institution’s investments can have large effects on mar¬ 
ket values throughout the system, this indicates a potential for extreme instability in the system 
as a whole; the small portfolio changes in one institution can have a drastically magnified effect 
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market values of other institutions, and so small changes by a myopic institution could topple even 
seemingly stable institutions. Third, this extreme sensitivity means that calculating market values 
in a privacy-preserving manner can be extremely difficult [NPH14]. This is the flip-side of the first 
point, in order to calculate market values for institutions in the system, all the interbank holdings 
need to be known with high precision, which means that revealing market prices has the potential 
to reveal extremely detailed information about each institution’s interbank holdings. 

Our second result addresses the question of how well a regulator can assess the stability of a 
network. Suppose a regulator or oversight agency is presented with a network in which every bank 
is solvent, and suppose the regulator believes that the underlying assets cannot drop in value by 
more than some fixed amount d. What is the maximum number of failures that can be caused 
by a drop of this size in asset values? We emphasize that in this scenario, the regulator has 
complete information about the entire structure of the financial network, and the only uncertainty 
is in which specific assets may decline in value. We show calculating the number of institutions 
that can fail in a network is NP-Hard. In particular, we show that is as hard as calculating the 
maximum balanced clique in a bipartite graph (Theorem 3). The maximum balanced bipartite 
subgraph (BCBS) problem is NP-hard [GJ79, Joh87], and there is evidence that it is even hard 
to approximate. It is known that if 3-SAT is not in DTIME ^2 n3/4+e ^ for some e, then there is 
no polynomial time algorithm for calculating the maximum balanced clique to within a factor of 
2 ( lo s n )' 5 fo r some <5 > 0. [FK04] go further, conjecturing that there is no polynomial time algorithm 
to approximate the maximum balanced bipartite clique to within a factor of n 5 for some <5 > 0. 
This would imply that there is no polynomial time algorithm that can even estimate the maximum 
number of failures caused by a drop in asset values of a given magnitude to within a factor of n s in 
a network with 2 n institutions. In particular, this means that there are financial networks where 
stress testing (which is inherently computationally feasible) cannot hope to even approximate the 
magnitude of collapse that could be caused by some bounded drop in asset values. 

Unlike our first result, which crucially relies on cycles in the network, this result holds even 
in acyclic networks: even when there are no cycles it is computationally intractable to estimate 
the maximum number of failures that could be caused by a bounded drop in asset values. This 
complexity arises not from cycles, but from the nonlinear dynamics that occur when a bank drops 
below its critical threshold value. 
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3 Previous Work 


Many different models have been proposed to study financial networks, and specifically models of 
stability and contagion. 

Allen and Gale [AG98] considered a model consisting of depositors and banks. Depositors de¬ 
posit their money in the banks, and the banks must choose between making short-term investments 
or long-term investments. This model has three time periods, t = 0,1,2. At t = 0, investments are 
made, at t = 1 short-term investments pay off, and depositors choose whether to withdraw their 
money, and at time t = 2 long-term investments pay off. The banks’ investment strategies then 
depend on the probability that depositors withdraw their money at time t = 1. In a follow-up work 
[AG00] introduced a network component, whereby banks can exchange deposits with each other in 
an effort to mitigate risk, and they showed simple contagion effects in this model. 

Acemoglu, Ozdaglar and Tahbaz-Salehi [AOTS13] build on Allen and Gale’s 3 time-step model. 
At time t = 0 banks can make a short-term investment, a long-term investment or loan money to 
other banks. Long term investments yield a fixed return at t = 2. Long term investments that are 
liquidated at t = 1 receive a return that is randomly distributed between two values. Banks whose 
investments returned the lower of the two values were said to have received a shock. Acemoglu, 
Ozdaglar and Tahbaz-Salehi considered how two extremal types of networks serve to propagate 
these shocks. They considered the ring (where each bank only has debts to its two neighbors) and 
the complete network where each bank’s debts are spread to all other banks, as well as all convex 
combinations of these two. They showed that if the magnitude of the shocks are small then the 
complete network is more stable and resilient than the ring, and if the magnitudes of the shock 
are large enough then both the ring and complete networks are the least stable networks, thus 
the complete network exhibits a phase transition, moving from the most stable to the least stable 
network as the magnitude of the shocks increase. 

Eisenberg and Noe [EN01] developed a very simple and appealing network model where each 
bank has cash reserves and fixed debts to other banks. Eisenberg and Noe’s work focused on 
showing that (under some basic restrictions on the network) there is always a unique clearing 
vector (indicating how much of its debts each bank pays to its creditors), and they gave a linear 
program and simple iterative algorithm for calculating this clearing vector and hence the equilibrium 
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valuation of each bank. 

Gai and Kapadia [GK10] considered a modification of Eisenberg and Noe’s network model, 
forcing all incoming edges to have the same weight, but allowed banks to have additional illiquid 
assets. Gai and Kapadia then considered the question of how a single bank failure propagates 
through a network. For this analysis, they considered different models for generating the underlying 
graph topology, and plotted contagion effects for different network models characterized by their 
degree distribution. They found that a single large shock could have devastating effects on the 
network, but that this was highly dependent on where in the network the shock hit. 

Gourieroux, Hearn and Monfort [GHM12] considered a model that allows interbank investment 
via shares (like [EGJ14]) and lending or insurance (like [EN01]). Unlike [EGJ14], they do not 
introduce discontinuous failure costs. Gourieroux, Hearn and Monfort extend Eisenberg and Noe’s 
uniqueness results to show that (under mild constraints on the network) this extended model has 
a unique equilibrium value for all institutions. They then examined the effects of exogenous shocks 
on the network (i.e., drops in asset values) using synthetic data and data obtained from the French 
banking sector. 

Morris [MorOO] studied contagion in local interaction systems. In that model, each node repre¬ 
sents a player, and each player engages in a local game with each of its neighbors. Morris focused 
on the case where each player has a binary strategy space, {0,1}, and there is a global 2x2 payoff 
matrix, such that for each edge in the graph, the two neigboring players receive a payoff accord¬ 
ing to this global payoff matrix. In that model, a strategy is said to be “contagious,” if it can 
spread from a finite set of players to an infinite set of players by the best-response dynamics of the 
underlying local game. 

The notion of failure cascades and contagion have also been studied in the computer science 
literature by [BEK + 11]. Blume et al. considered general cascades in graphs where the edges were 
unweighted and a node was said to fail if some critical threshold of its neighbors failed. By choosing 
all edges to have equal weight, and choosing each institution’s failure threshold carefully, the failure 
model of [EGJ14] can be made to overlap with this general network failure model. 

In this work, we use the model of [EGJ14]. In this model, institutions can own shares in each 
other, or in “primitive assets” that have intrinsic value outside of the network. The model is ex¬ 
plained in detail in the next section. Elliott, Golub and Jackson introduced this model to help 


7 



analyze and understand contagion effects in networks. Because a cascade of collapse requires an 
initial failure, Elliott, Golub and Jackson began by showing that the weakest institution can never 
be made strictly more stable by any fair trade between the institutions. Next they examined the 
contagion dynamics in a wide class of networks parametrized by “integration” and “diversifica¬ 
tion.” Integration increases as institutions in the network increase their inter-network holdings, 
i.e., integration increases as the percentage of each institution owned by shareholders external to 
the network decreases. As integration increases, the institutions fates are more closely tied to¬ 
gether. Diversification measures how risk is spread within the network. Diversification increases 
as institutions increase their number of cross-holdings. Neither integration nor diversification have 
strictly positive or negative effects on network stability, but instead have slightly more complex 
non-monotonic effects. 

The notion of computational complexity has been studied in the context of financial products 
by Arora et al. who showed that banks can create derivatives that are computational intractable to 
price accurately [ABBG10, ABBG11]. The result of Arora et al. crucially relies on the information 
asymmetry between the institution the seller (who creates the derivatives) and the buyer who 
only sees their resulting composition. Braverman and Pasricha [BP 14] show that even in the full 
information setting pricing compound options is PSPACE complete. 

4 Model 

We use the model put forward by [EGJ14], In this model there are n financial institutions, these can 
be viewed as countries, banks or private firms, and m underlying assets, that can be viewed as any 
object or project with intrinsic value. The financial institutions own shares of the underlying assets 
which impart value into the system. The values of the institutions themselves are interconnected 
via a network (modeled as a weighted, directed graph). The interdependencies (cross-holdings) 
between the institutions are modeled as simple linear dependencies. These linear cross-holdings 
can model simple equity stakes (one institution owning shares in another) or they can be viewed as 
an approximation of more complicated debt contracts between the institutions (see [EGJ14, Section 
2.5] for a more thorough discussion of the validity and generality of this model). 

Although institutions invest in one another, all value in the system originates from the under- 



lying assets. The price of asset k is denoted by pk, and we use Dik > 0 to denote the percentage of 
asset k owned by institution i. The n x m matrix of ownership is denoted by D = (Dik). 

We define C = (C l] ) to be the n x n matrix indicating the cross-holdings of institutions. Thus 
institution i owns a Cij fraction of institution j. It will be be useful to view the network of cross¬ 
holdings as a directed graph with n nodes representing the financial institutions, and an edge from 
institution j to i of weight C\j whenever Cij > 0. Following [EGJ14], we set Ca = 0 for all i. Now, 
£L Cij is the fraction of institution j that is owned by institutions external to j. The remainder, 
the amount of self-ownership, is denoted by Cjj c = 1 — The matrix C will be a diagonal 

matrix with Ca on the diagonal. 

As noted by [BBC89], this type of model introduces two types of valuations, the equity valuation 
(V) and the market valuation (v). The equity valuation of institution i is denoted by 

Vi. = y ] DikPk + y ] C t j Vj (1) 



Value of assets held by i Values of institutions held by i 

In matrix notation, this becomes V = Dp + CV which implies V = (I — C) _1 Dp. The matrix 
I — C is guaranteed to be invertible because we assume that Cjj > 0, so the column sums of C are 
all strictly less than one (see Lemma 2). In fact, the matrix I — C, is an M-Matrix [PB74], and so 
(I — C) -1 is an inverse M-Matrix, about which many properties are known [Wil77, Joh82], 

This equity valuation significantly overvalues the institutions. In particular, we can see that 
||V||i > ||p||i, so the total value of the institutions in the system will (in general) be much larger 
than the total value of the underlying assets. This occurs because each asset counts towards the 
equity value of the institution that owns it and also to the institutions that have an equity stake 
in the asset’s owner. The network’s inflation of equity values is well-known and validated both 
theoretically and empirically [FP91, FHT94]. 

To find an institution’s market value , we must scale the institution’s equity value by the percent 
stake it has in itself, thus the market value of institution i is Wj = CaVi, so the market values are 
the solution to the system 

v = CV = C(I - C) -1 Dp (2) 
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The matrix C is column sub-stochastic because column i sums to 1 — Ca. The system can also 
be viewed as a flow, where at each time step money flows between banks according to the link 
structure of the network (see Appendix A). 

5 Sensitivity 

Our first result concerns concerns the sensitivity of valuations to small changes in the structure 
of the network. Suppose a single institution shifts its holdings by a small quantity, e, how much 
can this small change affect the market valuations in the network? This question is motivated 
by questions about network stability, and the possibility of privacy-preserving oversight. If small 
changes in network holdings can lead to large changes in the market values of the institutions, 
this indicates a fundamental instability in the financial network. Additionally, if small changes 
in interbank holdings can lead to large changes in market values, then any attempt at financial 
oversight must know all the interbank holdings to a high degree of accuracy in order to predict 
market values. 

A high sensitivity also has implications towards privately computing network statistics. Flood 
et al. [FKOS13] proposed using tools from differential privacy [DwoOG, DMNS06] to provide a 
means of computing global network characteristics while preserving the privacy of each individual 
institution’s holdings. A high sensitivity implies a worse trade-off between privacy and accuracy 
when calculating network statistics. 

We begin our sensitivity analysis with a simple observation: if the total value of the underlying 
assets is ||p||, then an e change in holdings can easily change the market valuations by e||p|| (see 
Figure 1). We show that if the network is acyclic, then this is the largest change possible, but if 
there are cycles in the network, the sensitivity can be much larger. 

Throughout this section, we use r (for “reserve”) to measure the fraction of each institution held 
by investors outside the system. 1 We define r = min,; Ca. Using the terminology of [EGJ14], r is 
just a concrete metric of the integration of the network, and integration increases as r —> 0. Another 
interpretation of reserve is the discrepancy between equity valuation (V) and market valuation (v). 

lr The reserve, or self-holdings, can be viewed as the amount of an institution that is not sold, or is held by private 
shareholders, who retain complete ownership of themselves. These private shareholders buy shares of institutions in 
the network, but no entity in the network owns shares of the private shareholders. 
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Figure 1: An e change results in an e||p|| change in market values. Banks are in blue, external 
shareholders are in green, and the asset is shown in red. In this example Dp = 


Thus v = 

market valuation of Bo changes by e||p||. 


0 


1 ' 


’ 0 e 


' 1 - e " 

0 

. Changing C to C = 

0 0 

leads to a valuation of v = 

e 


, and C = 0. 
, thus the 


Since v = CV , we have that r = min* 


Vi • 


5.1 Sensitivity in acyclic networks 

We begin by noting that in the acyclic case, there is a strong bound on each institution’s equity 
valuation, i.e., the equity valuation cannot be too much larger than the market valuation. 

Lemma 1 . If the banking network has no cycles, then every institution’s equity valuation is at 
most ||p||i where p is the vector of asset values. 

Proof. Organize the financial network into layers, so that each institution only owns shares of 
institutions at lower layers. Thus institutions at level 1 do not have any cross-holdings, they only 
own the underlying assets. This means that the incoming edges to level one carry a total weight of 
at most ||p||i. By adding fictitious institutions that pass on all of their incoming wealth, we can also 
ensure that every institution only owns shares in the entities at the preceding level, i.e., institutions 
at level i only own shares in institutions (or fictitious institutions) at level i — 1. 

Now each institution’s equity value is the sum of the values on all incoming edges. Since outgoing 
edges carry a value that is a percentage of equity value, the sum of the values on each institution’s 
outgoing edges is at most the sum of the values on its incoming edges. (For real institutions the 
outgoing sum will be strictly less because the reserve rate r > 0, but for the fictitious institutions 
it can be exactly equal.) 
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Now, the sum of the values coming into layer 1 is at most the sum of the assets, ||p||i. Thus the 
outgoing edges from level 1 to level 2 carry a total weight of at most ||p||i. Proceeding inductively 
through the levels, we see that the sum of the values on the incoming edges at level i is at most 
||p||i. Thus the equity value of all the institutions on level i is at most ||p||i and in particular the 
equity value of any given institution is at most ||p||i. □ 

Corollary 1. If the banking network is acyclic, and one edge changes by at most e, then no 
institution’s market value can change by more than e||p||i. 

Proof. Since each institution’s equity value is at most ||p||i, an e change in any edge corresponds 
to an absolute change of at most e||p||i. □ 


5.2 Sensitivity in general networks 


In this section, we explore how much the market valuations can change when one bank changes its 
holdings by a small amount in the presence of cycles in the network graph. We begin by showing 
an upper bound on the change in market valuations that depends on the minimum self-ownership 
( Ca ) of the institutions. For our upper bound, we do not require changes to occur in the holdings of 
a single bank. Instead, we allow any change in network structure, as long as the total (£i) change 
is bounded by e. Formally, this means that we have two network matrices C and C such that 
||C — C || < e, and we would like to bound how much the market valuations can change between 
these two situations. Because we are showing an upper bound, allowing more general perturbations 
only strengthens our result. 


Theorem 1. If ||C — C|| < e, then ||F— F|| < - ||Dp||, where r = min i(Ca,Cn) is the minimum 
reserve or “self-holdings” of the financial institutions. In addition, it is always true that \\v — F|| < 
2 11Dp||, thus 


v — F|| 

Jm 


< min 



Proof. Let C = C + E, and C = C + E. By hypothesis ||E|| + ||E|| < e. Then we have 
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6(1 - C)- 1 - C(I - C)- 1 = [(C + E) - C(I - C)- 1 ^ - C)1 (I - C)- 1 

= (C + E)-C(I-C) -1 (I-C-E)1 (I-C)" 1 
= (C + E)-C(I-(I-C) -1 E)1 (I-C) -1 
= E + C(I-C) -1 El (I-C) -1 



Thus we immediately get the bound 


C(I-C) -1 -C(I-C) -1 <- 

r 

Since C(I-C)- 1 < 1, we also have the trivial bound 

||c(I- C) -1 - C(I-C) -1 || < 2 


□ 
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Figure 2: The initial configuration, banks are in blue, external shareholders are in green, and the 
asset is shown in red. 


The multiplicative bound of e /r in Theorem 1 is much weaker than the bound of e in the 
acyclic case (Corollary 1), as the minimum self-holdings approaches 0, this difference tends towards 
infinity. This discrepancy is not a limitation of our proof, but arises as an artifact of the effect that 
holdings cycles can have on the equity (and market) valuations of the institutions in the network. 
In Theorem 2 we show that there exist networks where changing a single institution’s holdings 
by e results in a change of ||Dp|| in one of the institution’s market values, where r is the 

minimum self-holdings in the network. 

Theorem 2. There exist networks where ||C — C|| < e, and \\v — u|| > -—||Dp||, where 

v = C(I- C) _1 Dp 

and r = min i(Ca,Cu) is the minimum “self-holdings” of the financial institutions. 

Proof. We exhibit an initial network in Figure 2 and its perturbation in Figure 3. 

In Figure 2, the equity values for the banks satisfy 

Bi = (1 - r - e)B 2 
B 2 = v + (1 — r)Bi 
£>3 = eB 2 
B a = 0 
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Figure 3: The perturbed configuration, where one link of weight e has been moved from to B 4 . 


B 2 = v + (l — r)B\ 

= v + (1 - r)(l - r - e)B 2 
= dT( 1 — r — e — r + r 2 + re)B 2 


Rearranging gives 


B 2 = v + (1 — r — e — r + r 2 + re)B 2 

v = (2 r + e — r 2 — re)B 2 

$ 

#2 = 




2r + e — r 2 — re 
v 

r{ 2 — r) + (1 — r)e 

1 / u \ 

> - 


2 \r + i^e y 


Thus the market valuation of B 3 is eB 2 which is at least ^ ( , VI 

\ r_l 2~ e 

If the link from B 2 —> B 3 were moved to B 2 — > B 4 (as in Figure 3) then B^s value drops to 
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zero and B^s value increases to ei? 2 - 

Thus the change in t\ norm of the market valuations between the two situations is at least 


r + ^e 


Writing this in matrix notation, we have 


0 1 — r — e 0 0 


1 — r 0 0 0 


0 1 — r — e 0 0 


1 — r 0 0 0 


0 0 0 


c = c = 


r 0 0 0 


0 r 0 0 


0 0 10 


0 0 0 1 


0 0 0 


Note that increasing one link by e and decreasing another by e is actually a change in 2e in the 


|C — C||. Letting e' = ■§, we have a change of e in ||C — C|| yields a change of at most 


2r+AfV 


Notice that as r —» 0, this is approaches 2, i.e., the resulting valuation is as far as possible in terms 
of the £i norm of the market values of the institutions. 

The type of equity amplification necessary for the lower bound in Theorem 2 cannot happen in 
an acyclic network (see Corollary 1). 

Now, we compare the upper and lower bounds on sensitivity. We have an upper bound of 
max(2, and a lower bound of . The lower bound implies the following. 

• For any e, 5 >0, there exists an r with 0 < r < 1 and a network with minimum reserve r 
such that a change in edge weights of e can lead to a change in market valuations of at least 
(1 — 6)2. Thus the upper bound cannot be decreased below 2. 

• For any r, 6 , with 0 < r < 1, and 0 < 5 there exists an e with 0 < e < 1 and a network with 
minimum reserve r such that a change in edge weights of e can lead to a change in market 
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valuations of at least (1 — 5)^, thus the upper bound cannot be decreased below 4L* 

Together, these show that the upper bound cannot be decreased below max(2, ^), so our upper 
bound of max(2, -) is essentially tight. Another interpretation of the lower bound is that for any 
n > 0, there exists an e, r > 0 and a network such that an e change in one edge weight can cause a 
multiplicative change of ne in market rnalues of the institutions. 

6 Bank failures 

6.1 Losses caused by failure 

The model of [EGJ14] includes a notion of “failure,” whereby institutions whose market value 
drops below a certain critical threshold suffer a further (discontinuous) loss in market value. These 
discontinuous penalties capture the notion that if an institution cannot pay its operating costs, it 
may see a further drop in revenues. Similarly, if confidence in the institution is shaken, and its debt 
rating is downgraded, it may see spike in the cost of capital, and hence see a further drop in value. 

These discontinuous penalties are operationalized by a threshold value Vi , such that if institution 
V s market value, Vi, drops below Vi then it incurs a failure cost and its market value drops by an 
additional /3i(p). 

Defining I Vi < Vi to be the indicator variable which is 1 if 'ty < Vi and 0 otherwise, and bi(v,p) = 
Pi{p)Ivi<vn the market value of the institutions satisfies the equation 

v = C(I — C) _1 (Dp — b(v)) (3) 

Compare Equation 3 to the linear system given by Equation 2. The introduction of non-linear 
terms into the model adds significant complexity to the dynamics of the system, and can lead to 
failure cascades. One of the primary goals of [EGJ14] was to characterize what network features 
affect the likelihood and severity of failure cascades. 

6.2 Overview of our complexity results 

Suppose a regulator has complete information about a financial network, including all cross-holdings 
and the prices of all underlying assets. Further, suppose that at equilibrium, this network has no 
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failures. If the regulator believes that tomorrow, asset prices may drop by some fixed amount d, 
( i.e ., the sum total of asset prices may drop by d, but the exact drop of each asset price is unknown), 
what is the maximum number failures that could occur as a result of this drop? In other words, 
tomorrow, when the new equilibrium is calculated based on the new, lower, asset prices, what is 
the maximum number of banks that could have failed? 

Our primary result is that the introduction of discontinuous failure costs increases the com¬ 
putational complexity of calculating basic network dynamics. If the complete network, as well as 
the price of all underlying assets is known, then the number of failures can be computed efficiently 
[EGJ14, Section 3.2.3]. If, on the other hand, there is some uncertainty in the prices (or future 
prices) of the underlying assets, calculating the maximum number of failures that could occur in 
the network is computationally intractable. 

Thus we address the following question: given a stable network (where no banks have failed), if 
the total prices of the assets drop by some small amount, what is the maximum number of failures 
that occur at equilibrium? One potential complication is that in networks with discontinuous failure 
penalties, there may not be a unique equilibrium, and hence the number of failures may not be 
uniquely defined. To address this, for any fixed set of asset prices, we use standard practice and 
only consider the “best-case” equilibrium (the one with fewest failures). On the other hand, we 
consider the worst drop in asset prices (i.e., the drop in asset prices that causes the most failures in 
its best-case equilibrium). Thus the “maximum” number of failures means the maximum over all 
bounded drops in asset values, of the minimum number failures that could occur at this each fixed 
drop in asset values (i.e., the minimum over all equilibria at these new, lower values). We discuss 
the issue of multiple equilibria in more detail in Section 6.3. 

In real-world financial networks, regulators, as well as the institutions themselves routinely 
perform “stress-tests” to assess the robustness of the network to financial shocks. Our results 
indicate that there are financial networks where no (computationally feasible) stress test, will ever 
be able to even approximate the maximum number of failures that could occur from some small 
shock to the system. 

Note, however, that our results are not probabilistic, in the sense that we do not model the 
probability of a specific drop in asset prices, instead we just impose a bound on the magnitude of 
the total drop in asset values. Without assigning probability distributions to the asset prices, we 


18 



cannot assess the probability that such a cascade could occur, only that it is feasible. Thus our 
question is whether there exists a small specific drop in asset prices that could cause a huge failure 
cascade - whether this drop is probable is outside the scope of our model. Thus, if a stress-test 
could accurately model the probability distribution of asset prices, it may be able to assess the 
likely number of failures caused by a shock to the system, but any computationally feasible stress 
test will not be able to identify whether a small (but possibly unlikely) shock to the system could 
cause a far greater failure cascade. 

6.3 Multiple equilibria 

When discontinuous failure penalties ( b(v )) are introduced into the system, then there may be 
multiple equilibrium values for the institutions in the system, i.e., the market values may not be 
uniquely defined [EGJ14, Section 2.6 and Appendix A.7]. As noted [EGJ14], there are two distinctly 
different ways a network can have multiple equilibria. The first type falls into the standard theory of 
bank runs [DD83], and this type of multiplicity can occur even in an acyclic network. For example 
suppose there is a network consisting of single institution holding a single asset of value p. Let v 
denote the value of the institution and v denote its failure threshold, and (3 its failure penalty. If 
p > v > p — (3, then a valuation of v = p, and v = p — (3 are both consistent with Equation 3. The 
second type of multiplicity is caused by cycles in the network. See Figure 4 for a simple (cyclic) 
network that has multiple equilibria. 

In a network with multiple equilibria, we can talk about the “best-case” equilibrium (the one 
with the fewest failures) and the “worst-case” equilibrium (the one with the most failures). As in 
[EGJ14], we focus on the best-case equilibrium, thus when we refer to the “the number of failures” 
we mean the number of failures in the best-case equilibrium. 

6.4 The Balanced Complete Bipartite Subgraph (BCBS) problem 

Our hardness result is based on the hardness of finding a maximum balanced clique in a bipartite 
graph. This is known as Balanced Complete Bipartite Subgraph (BCBS) problem. 

Definition 1 (BCBS). Given a bipartite graph G = ( Ti, V 2 ,E) with |Vi| = | V 2 1 = n, the Balanced 
Complete Bipartite Subgraph (BCBS) problem is to find the largest integer I\ such that there exists 
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Figure 4: Banks are in blue, external shareholders are in green, and the asset is shown in red. In 

. If Vi = 2, and bi = 1, then two equilibria are: 


this example Dp = 

' 1 

0 

0 ' 
1 

, and C = 

'or 
U oj 

v = 

1 

1 

, and v = 

0 ' 
0 





sets C\ C V] and C 2 C V 2 with the properties that \C\\ = IC 2 I = K, and the induced graph on 
C\ U C 2 is a complete bipartite subgraph of G. 

The BCBS problem is known to be NP-hard [GJ79, Joh87]. This provides strong evidence that 
there is no scalable algorithm that it that can find the size of the maximum balanced clique in a 
bipartite graph. 

In fact, there is significant evidence that even approximating the size of the largest balanced 
clique is hard. Feige showed that for some 5 > 0 it is Random 3-SAT hard to approximate BCBS 
to within a factor of n s [Fei02, Theorem 3]. 

Feige and Kogan showed that if BCBS can be approximated to within a factor of 2^ logn ^ for 
every 5 > 0 then 3-SAT can be solved in time 2 n3/4+e for every e > 0 [FK04, Theorem 1.3]. 

Feige and Kogan go on to conjecture that for some 5 > 0, there is no polynomial-time algorithm 
to approximate BCBS to within a factor of n* 5 [FK04, Conjecture 1.1]. 

Our primary hardness result shows that there are networks where calculating the maximum 
number of bank failures that can result from a small shock is equivalent to solving the BCBS 
problem. Thus there are financial networks where even approximately estimating the number of 
bank failures that can result from an arbitrarily small drop in asset prices is a computationally 
intractable problem. 
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6.5 The complexity of calculating the maximum number of failures 

In this section, we give our main result concerning the computational complexity of estimating the 
maximum number of failures that can occur given a small drop in values of the underlying assets. 

In particular, this hardness result applies finding the number of failures that occur at equilibrium 
when the institutional cross-holdings are fixed, and completely known, but there is some small 
uncertainty in the prices of the underlying assets. 

In the situation that the cross-holdings and the assets are fixed, it is straightforward to calculate 
the market values of the institutions at equilibrium [EGJ14, Section 3.2.3]. Note that the network 
we construct is acyclic. 

Theorem 3. For every bipartite graph G on 2 n nodes, and every e > 0, there is a financial network 
with Q(n) institutions, and a d > 0 such that computing the maximum number of institutions that 
could fail following a shock of de in asset prices is as hard as solving the BCBS problem in G. 

Proof. Let t > 0 be any integer. 

Our starting point is the following hardness result for the BCBS problem. Given an n x n 
balanced bipartite graph G , it is hard to decide whether the largest balanced bipartite clique size 
in G is at least K x K or at most K/g x K/g for some gap function g. For instance, g = 2( logn ^ 
under the assumption that 3-SAT ^ DTIME ^2 n3/4+e j for some e > 0. 

Given annxn balanced bipartite graph G , we will construct a financial network with (2 + £)n 
institutions such that if G has a balanced bipartite subgraph of size I\, then a drop in asset prices 
by Ke can cause at least (2 + £)K failures. On the other hand, if the largest balanced bipartite 
subgraph of G is of size y, a drop in asset prices of Ke can cause at most K + ^(t + 1) failures. 

This shows that estimating the maximum number of failures induced by a fixed drop in asset 
prices is at least as hard as estimating the size of the maximum balanced bipartite clique. Without 
loss of generality, we assume that every vertex in G has degree at least K. 

Let D denote the maximum degree of any vertex in G. Let 0 < e < 1 be an arbitrary parameter, 
and let 0 < r < 1 denote the minimum amount of self-holdings of the institutions in the network 
we are constructing. (The reduction will hold for any choices of 0 < e, r < 1.) 

For each node in the graph G, we will associate a financial institution. Let institutions 1 ,,n 
correspond to the left-hand nodes of G, and institutions n + 1 ,..., 2 n correspond to the right-hand 
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nodes of G. 


We will also generate n underlying assets, labelled a ■,..., a' n and institution i will complete 
own asset a\ for i = 1 ,,n. Institutions n+ 1,... ,2n will own none of the underlying assets. All 
assets will initially be valued at 1. Thus 


1 


Define N = (recall D is the maximum degree of G, and r is an arbitrary parameter that 
will determine the integration of the resulting financial network). We will use T(j) to denote the 
neighbors of vertex j in G. Notice that our definition of N ensures that 


D 

1 ~~ r ~ N ~ 


ra i 

N 


for all j = 1,..., 2 n. This means that if institution j sells an equal stake in itself to all of its 
neighbors, it will be left with at least an r fraction of self ownership. To operationalize this, we 
define 


c 


ij 


jj if i > j and (i. j) an edge of G 
0 otherwise 


For 1 = 1,..., n let Vi = 1 — —e, so if institution i’s asset drops in value by e then institution 

i will fail. Let the failure penalty = 1 — — e for i = 1,..., n. Thus if asset i drops in price 

by e, institution i fails and its value immediately drops to 0. For i = n + 1,..., 2n let Uj = -^ - . 
Notice that if all assets are initially valued at 1 then 




N 


Vi = < 


JIM 

N 


if 1 < i < n 


if n < i < 2n 
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This financial network has the following properties: 


1. If j > n and d of bank j’s neighbors fail, i.e., d of the assets a* (i £ T(j)) drop in value by e, 
then bank j will fail. 

2. If j > n and the total drop in value of bank j’s neighbors is less than jj then bank j will not 
fail. 

Now, we examine the properties of this system when the assets are allowed to drop in price by 
total amount de. A drop of de can always cause d institutions on the left-hand side of the network 
to fail, simply by dropping the value of each of their assets by e. 

What happens if the price drop is not concentrated among exactly d assets? Let t denote the 
number of assets that drop in value by at least e. If t < d, then at least te from the “shock budget” 
of de was used to lower the price of these f assets, which leaves a budget of ( d — t)e remaining. 
Now, consider how much this drop can affect one of a right-hand institutions, j. Even if this drop 
is concentrated entirely among the left-hand neighbors of j, the drop j feels is at most 

L (t + (<i — t)e) < L (( + (<i - t)) = L 

Thus institution j cannot fail, since the failure of a right-hand institution requires a drop in value 
of at least This means that in this case exactly t < d institutions fail. Since we are interested 
in the maximum number of failures that can arise from a drop in asset value of de, we can, without 
loss of generality, assume that exactly d assets drop in value by e, causing exactly d failures among 
the left-hand institutions. 

Now, suppose there is a biclique of size K in G. If d = K, then causing d failures among the 
left-hand members of this biclique will cause d = K failures among the right-hand members. 

On the other hand, suppose the largest biclique is of size y. If the failure of d left-hand 
institutions causes the failure of P right-hand institutions, then each of the P failed institutions on 
the right must be connected to each of the d failed institutions on the left. Thus there must be a 
biclique of size min(ri, P) = P. 

Thus in the “yes” case ( G has a biclique of size K) we can cause at least K right hand failures 
with a failure budget of Ke. In the “no” case (the largest biclique in G is of size K /g) the maximum 
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number of failures of right-hand institutions is bounded by p . 

Now, to amplify this discrepancy, we add a chain of £ institutions connected to each right hand 
institution. Thus for every right-hand institution, bi, it will have a chain of institutions bp\ ..., b^p 
where bp owns a 1 — r fraction of b'f ^ and has no other holdings. Thus if 6,; fails, then bP 
through bp fail as well (see Figure 5). 

This new network has (£ + 2 )n banks, and has the following properties. Given a failure budget 
of Ke, if the largest balanced clique in G is a I\ x K, a drop in value by Ke causes at most (2 +£)K, 
but if the largest biclique is of size p, then a drop in asset values of at most Ke can cause at most 
K + (£ + l)p = (g + £ + l)p failures. 

Note that when the gap, g = n 5 , choosing l = poly(n), we obtain a gap of ((£ + 2 )n) s ' for some 


Applying a result of [FK04], we obtain the following Corollary. 

Corollary 2. If 3-SAT 0 DTIME (p n3/4+e j for some e > 0, then there exists a 6 > 0 such that 
there is no polynomial time algorithm that can calculate the maximum number of failures in a 
financial network caused by a drop in asset prices of de to within a factor of 2 ^ logn ) for some 
S' > 0 . 

7 Conclusion 

This work highlights two distinct sources of instability in financial networks, instability arising 
from fluctuations in cross-holdings and instability arising from fluctuations in asset prices. More 
specifically, we show that there are networks where small fluctuations in cross-holdings or asset 
prices can have striking consequences, and these consequences have numerous implications. 

Our first result (Corollary 1, Theorems 1, 2) shows that the effect of small changes in cross¬ 
holdings is strongly tied to the integration of the network. In highly integrated networks small 
changes in cross-holdings can have potentially unbounded effects on market valuations, while in 
networks with low integration, changes in cross-holdings have more tightly bounded effects on 
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Figure 5: There are n assets, {a^}, shown in red. Each asset a[ is fully owned by institution 
a*. Institutions {aj}, {bi} correspond to a hard instance of balanced bipartite clique. Institutions 



serve to amplify the failures that occur in the first level. 
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the market values of the institutions in the network. These results can be interpreted in many 
ways. From a regulatory perspective, in a highly integrated network, any regulator must know the 
entire cross-holdings network to a very high degree of accuracy in order effectively understand the 
market values of the institutions. From an institution’s perspective, small changes in investment 
by individual institutions can have their effects greatly magnified throughout the network. From a 
predictivity perspective, if one wishes to forecast market values into the future, any small forecasting 
uncertainty in the cross-holdings can have enormous effects on the (predicted) market values of 
the institutions. From a privacy perspective, institutions cannot maintain any privacy in their 
investment portfolios without compromising the ability of outsiders (e.g. other institutions, outside 
investors or regulators) to calculate the market value of the institutions. These problems arise only 
in highly integrated networks (Theorem 1), and they can all be mitigated by imposing a cap on 
integration. If institutions are required to maintain some fixed percentage of their ownership outside 
of the network, the sensitivity to changes in cross-holdings can be drastically reduced. 

Our second result shows that small changes in the prices of the underlying assets can have 
unpredictable effects on the number of failures in the system. Specifically, we show that there are 
networks where it is computationally intractable, even with perfect information about the cross¬ 
holdings, to estimate the number of failures that can occur after some small drop in asset prices. 
This result too can be interpreted from different perspectives. This result implies that a regula¬ 
tor (with perfect information about the network cross-holdings) who believes there may be some 
bounded fluctuation in asset prices cannot be expected to distinguish a network where these fluctu¬ 
ations cause a small number of failures, from a network where fluctuations of the same magnitude 
can cause a massive number of failures. Institutions face the same computational challenge. An 
institution may wonder whether its investment portfolio will protect it from a bounded shock in 
asset prices, and our results show that even with complete information about the investments of 
all other agents in the system, it may be infeasible to determine whether a specific portfolio is safe. 

Previous works have imposed specific probabilistic models on fluctuations in asset prices, and for 
a given probabilistic model the number of failures can usually be estimated. But what if the model 
is incorrect (e.g. the asset prices do not fluctuate independently)? Our results show that there are 
situations where changes in the distribution of fluctuations (but not their overall magnitude) can 
have huge and unpredictable effects on the number of failures. 
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Moving forward, it is an important research question to understand what constraints on the 


network will allow institutions and regulators to perform these stability analyses. 
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Appendix 


A A flow model of the system 

It is often instructive to create a stochastic matrix representing the system, which models money 
flowing through the network. 

There are n financial institutions, and we introduce n addition entities, the “shareholders.” In 
this model shareholder i owns a Ca fraction of institution i and has no other financial ties to the 
system. This defines a 2n x 2 n matrix, A, defined as 


c 

0 

c 

I 


The augmented matrix A is now column stochastic, i.e., its columns sum to 1. The ij th entry 
of the matrix A represents the fraction of “agent” j owned by agent i. There are 2 n agents 
because there are n financial institutions (agents 1 ,,n) and n collections of shareholders (agents 
n + 1,..., 2n). The lower right corner of A is the identity matrix because the shareholders are 
completely self-owned. The columns of A sum to one because for each agent, j, its entire value is 
owned by the other financial institutions or the external shareholders. 

Initially, the banks are assumed to have some intrinsic value Dp, which indicates the value of 
underlying assets owned by each institution. Without loss of generality, we will assume that all 
assets are completely owned by the institutions in the network (otherwise, we can simply rescale 
the value of each asset). This assumption is equivalent to saying that D is column stochastic. 

The 2n x 2 n matrix A allows us to view the market valuations of each institution as the steady 
state of a dynamical process. Money flows into the system from the underlying assets, and at 
each time step, the value residing in each financial institution is distributed to its stakeholders 
according to their stake. This process terminates when all the money in the system (coming from 
the underlying assets) has been distributed to the external shareholders. Algebraically, this process 
can be viewed as follows: given a vector W € M 2n , where W{ denotes the value of the underlying 
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assets owned by i, for i = 1,..., n and Wi = 0 for n < i < 2n, then 


lim A t W = lim A* 

t—> oo t—> oo 







w 


0 


0 

0 


V 


V\ 


( 4 ) 


where Vi will denote the market value of institution i, i.e., Vi is the value of institution i owned by 
its external shareholders. Now, basic linear algebra tells us that 


A* = 


C C M + C M + - + I 


0 


Throughout this work, we will use the standard operator norm for a matrix (in the L\ sense), 

l|AT||i 


|A|| = 11 A 11 1 = sup- 


* i 


Because the columns of A sum to one, we have ||Ax||i = ||x||i for any x. In particular, this 
means that 

II r 

D p 


0 


= IIpIIi 


(5) 


This is the algebraic statement that the total market value of all the institutions is exactly the 
total value of the underlying assets in the system. 

To analyze equation 4 we recall the standard fact about matrix series 

Lemma 2. If C is a matrix with ||C|| < 1, then I — C is invertible and 

OO 

a-cr'^c* 

k =0 
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Proof. First, note if v / 0, then ||CF|| < ||-u||, so 

||(I- C)u|| > 11If;11 - ||C-u|| > 0 

so I — C has a trivial kernel, and hence is invertible. 

Then, the result follows just as in the scalar case: Letting S = Y2k=o , we have S(I — C) = 
I - C' v+1 . Thus 

N 

^c fc = (i-cr^i-c^ 1 ) 

k =o 

Letting N — > oo, and noting that C N+1 —>• 0 gives the result. □ 

This leads to the closed formula used in [EGJ14]: 

v = C(I - C) _1 Dp (6) 

Where the n x 1 vector p represents the values of the underlying assets and the vector v represents the 
market value of the financial institutions (as measured by their external shareholders). Equations 
4 and 5 then tell us that ||Dpj|i = ||pj|i = ||hj|i, which is just the simple statement that the total 
value of the agents is the same as the total value of the underlying assets, in other words value is 
never created or destroyed by the network. 
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